Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c0478ef-67fa-4343-8fdb-8dfa6b450bbf.roa
File:                     6c0478ef-67fa-4343-8fdb-8dfa6b450bbf.roa (raw, json)
Hash identifier:          eUo7tZumee4QLHQSK5BJ8uMxbxL4biHg19427oOCCqY=
Subject key identifier:   1F:87:B6:25:44:3E:C1:9D:4D:22:8E:87:E6:F9:1E:45:35:9D:6E:5C
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       181850660A0CFB463DDD0CAD84568925F74D8E01
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c0478ef-67fa-4343-8fdb-8dfa6b450bbf.roa
Signing time:             Thu 23 Oct 2025 20:10:00 +0000
ROA not before:           Thu 23 Oct 2025 20:10:00 +0000
ROA not after:            Thu 27 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        18.160.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:18:50:66:0a:0c:fb:46:3d:dd:0c:ad:84:56:89:25:f7:4d:8e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Oct 23 20:10:00 2025 GMT
            Not After : Nov 27 23:59:59 2025 GMT
        Subject: serialNumber=0c8651de7d6ac004298d03c719b712478f71fecd0073d683c58fab6554eea75f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a0:71:22:40:7c:ae:d7:3f:c3:27:a8:81:5d:
                    cd:44:e3:fd:b9:d3:6a:64:b8:3b:77:ad:ac:5e:f5:
                    be:b7:aa:40:8e:83:3b:1a:d3:0c:10:53:05:8a:0a:
                    09:f2:e5:95:a0:f8:a8:81:31:ca:5f:0d:f1:a6:43:
                    80:9f:cf:e4:7b:85:45:ea:ac:3b:47:fb:12:4b:d9:
                    17:03:8e:e7:dd:ff:b2:4a:5c:28:d2:a1:63:d1:db:
                    f8:4c:01:39:7b:45:aa:f3:87:44:c7:70:77:97:b0:
                    ad:4e:41:30:81:e2:1a:25:6a:36:8a:05:17:77:96:
                    11:a8:1c:50:87:69:43:3d:f0:90:50:36:d5:07:92:
                    94:fc:d6:98:32:5f:86:38:d6:a7:1c:14:58:e3:c3:
                    41:f5:0c:b1:eb:05:65:e9:dd:5e:0d:f2:b5:57:f1:
                    ba:3f:56:48:11:4f:82:37:9b:e4:a4:9f:10:4a:00:
                    6d:74:ef:00:1e:16:a6:24:44:40:81:df:29:19:78:
                    f3:73:03:24:95:78:7f:48:d4:a0:f0:fb:4f:4e:39:
                    77:ba:b6:ea:13:59:d9:d0:42:45:b1:fe:44:f0:f2:
                    aa:1f:5c:7a:e9:de:b7:3a:cb:62:de:b8:6a:77:47:
                    a6:61:c7:97:97:df:2e:e8:a7:36:2b:cf:d6:40:d1:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:87:B6:25:44:3E:C1:9D:4D:22:8E:87:E6:F9:1E:45:35:9D:6E:5C
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c0478ef-67fa-4343-8fdb-8dfa6b450bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.160.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         90:04:b7:dd:53:22:cd:de:f5:7a:a6:9f:2d:a6:dc:bb:fc:16:
         67:a9:1e:0c:e0:d8:77:9c:fe:26:4a:f7:b3:7a:27:6f:d7:cf:
         95:1a:2d:8c:7f:b0:f1:5b:bb:9a:3a:6d:27:0a:37:cb:57:b1:
         8e:b9:0e:d2:20:a4:61:0c:d9:1d:c9:2f:aa:4d:ae:84:5d:a1:
         36:ec:ac:03:de:68:a9:2a:ab:15:88:db:f3:62:13:51:f1:80:
         3b:9b:b7:a5:7f:f0:ac:28:eb:d4:22:07:d1:48:9a:ec:e0:69:
         04:e3:07:49:49:7f:42:3d:6b:24:07:69:02:5e:ef:ee:c0:8d:
         b7:73:aa:d6:b4:ce:74:12:eb:a3:60:76:b5:98:a1:81:42:f6:
         09:92:55:e9:ef:30:3c:c8:b1:60:10:02:fb:97:89:4f:a5:42:
         09:17:4a:de:0e:ac:28:8f:6b:fd:96:55:e6:2b:79:e0:05:17:
         f7:09:a9:46:da:1e:43:f6:18:b7:ee:25:c3:07:6b:73:99:cd:
         83:90:71:dc:cb:6b:81:ef:37:66:f2:1d:f7:00:ce:c3:a6:b6:
         83:69:f7:43:ac:e7:3c:45:37:8d:e3:e8:3e:39:b9:5f:86:f4:
         51:b6:10:30:1e:8c:38:1d:63:18:19:4b:e9:20:01:36:63:ab:
         af:cb:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:24 2025 by rpki-client